c731500cf6
Follow-up reconciliation: _send_file_attachment (the merged #95688/#74999 helper) now uses #78046's strict _parse_send_receipt contract and redact_path error bounding, so CLI failures never leak host filesystem paths and zero-exit unverified receipts are rejected on every outbound media path.